WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
collision-testimonials
Published
2014-08-01
Title
Collision Testimonials <= 3.0 - SQL Injection
Slug
color-palette
Published
2025-06-12
Title
Color Palette <= 4.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via hex Parameter
Slug
color-your-bar
Published
2025-05-07
Title
Color Your Bar <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
colorful-categories
Published
2021-10-13
Title
Colorful Categories < 2.0.15 - Arbitrary Colors Update via CSRF
Slug
colorlib-coming-soon-maintenance
Published
2022-05-30
Title
Coming Soon and Maintenance by Colorlib < 1.0.99 - Admin+ Stored Cross Site Scripting
Slug
colorlib-coming-soon-maintenance
Published
2024-03-19
Title
Coming Soon & Maintenance Mode by Colorlib <= 1.0.99 - Information Exposure
Slug
colorway
Published
2023-02-08
Title
ColorWay <= 4.2.3 - Cross-Site Request Forgery
Slug
colour-smooth-maps
Published
2024-11-08
Title
Smooth Maps <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
column-matic
Published
2023-05-12
Title
Column-Matic <= 1.3.3 - Contributor+ Stored XSS
Slug
combo-wp-rewrite-slugs
Published
2024-11-08
Title
Combo WP Rewrite Slugs <= 1.0 - Missing Authorization to Authenticated (Subscriber+) Settings Change
Slug
comfino-payment-gateway
Published
2024-12-06
Title
Comfino Payment Gateway < 4.1.2 - Reflected Cross-Site Scripting
Slug
comic-easel
Published
2024-03-29
Title
Comic Easel <= 1.15 - Reflected Cross-Site Scripting
Slug
comicbookmanagementsystemweeklypicks
Published
2022-11-14
Title
Comic Book Management System < 2.2.0 - Admin+ SQLi
Slug
coming-soon
Published
2020-06-25
Title
Coming Soon Page, Under Construction & Maintenance Mode by SeedProd < 5.1.2 - Authenticated Stored Cross Site Scripting (XSS)
Slug
coming-soon
Published
2023-09-18
Title
Website Builder by SeedProd < 6.15.15.3 - Arbitrary Settings Update via CSRF
Slug
coming-soon
Published
2024-01-31
Title
Website Builder by SeedProd < 6.15.22 - Unauthenticated Plugin Page Content Update
Slug
coming-soon
Published
2024-09-24
Title
Website Builder by SeedProd < 6.18.4 - Editor+ Stored XSS
Slug
coming-soon
Published
2025-05-08
Title
Website Builder by SeedProd < 6.18.16 - Subscriber+ Sensitive Information Exposure
Slug
coming-soon
Published
2025-12-24
Title
Website Builder by SeedProd <= 6.19.8 - Missing Authorization
Slug
coming-soon-blocks
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
coming-soon-blocks
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
coming-soon-by-boomdevs
Published
2025-12-31
Title
BoomDevs WordPress Coming Soon <= 1.0.4 - Unauthenticated Information Exposure
Slug
coming-soon-by-supsystic
Published
2021-05-24
Title
Coming Soon by Supsystic < 1.7.6 - Reflected Cross-Site Scripting
Slug
coming-soon-by-supsystic
Published
2023-01-19
Title
Coming Soon by Supsystic <= 1.7.10 - Cross-Site Request Forgery
Slug
coming-soon-countdown
Published
2025-04-10
Title
Coming Soon Countdown <= 2.2 - Reflected Cross-Site Scripting